Legal
Privacy Policy & Cookies
YUXI s. r. o. — effective 7 September 2026
1Controller — who is responsible for your data
The controller of your personal data is YUXI s. r. o., the company that operates this website and supplies the goods offered on it.
- YUXI s. r. o., registered seat: Bárdošova 2561/28, 831 01 Bratislava, Slovakia
- Company ID (IČO): 55564551
- Tax ID (DIČ): 2122038105
- Entered in the Slovak Commercial Register, section Sro, insert 171187/B; incorporated on 25 July 2023
- E-mail: yuxipower@gmail.com
- Phone: +421 948 50 77 88
- Website: www.yuxi.sk
- Person answering data protection questions: Gyorgy Baran, director
The address above is the seat recorded in the commercial register. It is a residential address, not a warehouse and not a collection point — please do not travel there for goods. Deliveries are arranged with us by phone or e-mail.
We have not appointed a data protection officer; for a company of our size and activity the GDPR does not require one. Write to the address above and the director will answer.
2The personal data we collect
A) Data you give us yourself
- Your name and the name of the business you are ordering for
- E-mail address and phone number
- Company identifiers: IČO and DIČ
- Delivery address
- The content of your enquiry: the items in the basket, the number of cartons and anything you write in the message field
When you enter an IČO in the order form, we look the company up in public registers — the Slovak Register of Legal Entities (RPO), the Czech ARES and the European VIES system — so the trade name, seat and tax identifiers are filled in for you. Those registers are public and we only read from them. Whatever they return is shown to you before you send the form, so you can correct it.
B) Data collected automatically
- IP address
- Browser type and version, operating system, type of device
- Pages opened on www.yuxi.sk, the time of the visit and the page that referred you
- Technical and security logs kept by our hosting provider
No measurement or profiling data is collected on top of this, because no analytics tool is running — see section 6.
We do not collect special categories of data — health, religion, political opinions, biometrics — and we ask you not to send them to us. We also run no automated decision-making and no profiling.
3Why we process your data
YUXI is a wholesaler. We supply Asian food products and takeaway packaging to Asian restaurants and sushi bars in Slovakia and Austria. Goods are ordered by the carton and paid for by invoice or cash on delivery. That business is the reason we hold your data:
- To answer your enquiry. The basket on this site is a request for a quotation, not a purchase — nothing is charged when you send it. We read what you asked for, check stock and price, and come back to you.
- To agree and deliver an order: confirming quantities, arranging a delivery date and place, handing the goods over.
- To issue and keep the invoice. Invoices are issued through SuperFaktúra.
- To confirm that we are dealing with a business. We sell wholesale, to companies, so we verify the IČO and DIČ you give us against public registers.
- To operate and protect the website: keeping it available, preventing spam and abuse of the enquiry form.
- To understand, in aggregate, how the catalogue is used — only if you allow analytics cookies (section 6).
We do not send newsletters or marketing e-mails unless you have asked us to, we run no advertising on this site, and we do not build customer profiles.
4Legal basis under the GDPR
- Steps taken before a contract and performance of a contract — Art. 6(1)(b) GDPR: answering your enquiry, agreeing an order, delivering the goods.
- Legal obligation — Art. 6(1)(c) GDPR: issuing invoices and keeping accounting and tax records as Slovak law requires.
- Legitimate interests — Art. 6(1)(f) GDPR: keeping the site secure, preventing misuse of the forms, verifying that a buyer is a real business, and defending a legal claim if one arises. We have weighed these interests against your rights and consider the processing limited and reasonably expected in a B2B relationship.
- Consent — Art. 6(1)(a) GDPR, read with § 109 of Act No. 452/2021 Coll. on electronic communications: analytics cookies only. Consent can be withdrawn at any time and withdrawal takes effect for the future.
Only cookies rest on consent. Refusing them changes nothing about your order — the catalogue, the basket and the enquiry form work exactly the same way.
5Payments
This website takes no payments. There is no card form, no payment gateway and no checkout. The basket sends us a request; the price is confirmed afterwards, by us, in a reply.
We therefore never receive, process or store card numbers, expiry dates or security codes. No payment processor is embedded in these pages, so no such provider learns anything about your visit.
Payment happens away from the website, once an order has been agreed: by bank transfer against an invoice, or cash on delivery when the goods are handed over. Invoices are issued and stored in SuperFaktúra and carry your company details, the items and the amount — never card data.
7Who we share your data with
We do not sell personal data and we pass it to nobody for their own marketing. Data reaches a third party only where that party runs part of the service for us, under a contract that binds it to our instructions.
- Hosting — Vercel: the website and its server logs run on this infrastructure.
- Content management — Sanity: the product catalogue, texts and photographs behind the site are stored there.
- E-mail delivery — Resend: the service that carries your enquiry from the form to our mailbox and sends you the confirmation.
- Invoicing — SuperFaktúra: where invoices are issued and kept.
- Public registers — the Slovak RPO, the Czech ARES and the European VIES: used to verify the company identifiers you enter. We only read from them; we write nothing about you there.
No analytics provider appears on this list, because no analytics tool is running (section 6).
We also disclose data where the law obliges us to — to a tax authority, a court or another public body acting within its powers — and to advisers bound by professional confidentiality, such as an accountant or a lawyer, where a particular matter requires it.
8Transfers outside the European Economic Area
We choose suppliers so that data normally stays inside the European Union. Some of them, however, belong to groups that operate globally, and support, backup or maintenance work can reach a country outside the European Economic Area.
Where that happens, the transfer is covered by the Standard Contractual Clauses adopted by the European Commission under Art. 46(2)(c) GDPR, together with the technical measures the supplier applies — or by an adequacy decision of the Commission where the destination country has one.
You may ask which supplier processes data where and under which safeguard. Write to yuxipower@gmail.com and we will tell you what we know and send you a copy of the relevant safeguard.
9How long we keep your data
- Enquiries, orders and the correspondence around them: 24 months from our last contact with you, then deleted — unless a longer period is required by law.
- Invoices and accounting documents: for the period Slovak accounting and tax legislation requires. We cannot shorten it.
- Server and security logs: up to 6 months.
- Your cookie choice: it stays in your browser until you change it or clear your browser storage.
- Analytics data: as set out in section 6.
When a period ends, the data is deleted or irreversibly anonymised so that it can no longer be linked to you.
10Your rights under the GDPR
Exercising any of these rights is free of charge:
- Access — Art. 15 GDPR: a copy of the data we hold about you and an explanation of what we do with it.
- Rectification — Art. 16 GDPR: correction of anything inaccurate or incomplete.
- Erasure — Art. 17 GDPR: deletion, where we no longer need the data and no legal duty makes us keep it.
- Restriction — Art. 18 GDPR: freezing the processing while a dispute about accuracy or lawfulness is settled.
- Objection — Art. 21 GDPR: against processing based on our legitimate interests.
- Portability — Art. 20 GDPR: the data you gave us, in a structured machine-readable file, for you or for another controller.
- Withdrawal of consent — Art. 7(3) GDPR: at any time, for analytics cookies, without affecting what was lawful before.
- Complaint — Art. 77 GDPR: to the supervisory authority (section 14).
Write to yuxipower@gmail.com or call +421 948 50 77 88. We reply within one month; if a request is complex we may extend that by two further months and will tell you why. We may ask a question or two to be sure we are answering the right person — that check protects you, and it is not a way of delaying the answer.
11Children
This is a wholesale site for restaurants and food businesses. It is not directed at children, nothing here is sold to consumers, and we do not knowingly collect data about anyone under the age of 16.
In Slovakia the digital age of consent is 16 years, so a child cannot validly consent to cookies here.
If you believe a child has sent us data through a form on this site, write to yuxipower@gmail.com and we will delete it.
12Security
The site is served over HTTPS, so everything you type into a form travels encrypted.
Access to enquiries, to the content management system and to the invoicing account is limited to the people who need it for their work, each with a separate account and password. We keep that number small — being a small company is an advantage here.
Our suppliers are established services that run their own encryption, backups and monitoring. No system is perfect. If a breach ever put your rights at risk, we would notify the supervisory authority and, where the law requires it, you as well (Arts. 33 and 34 GDPR).
13Changes to this policy
We update this document when the site changes, when a supplier is added or dropped, or when the law moves. Substantial changes are reflected in a new effective date at the top of this page; we do not rewrite the text quietly.
If a change concerns something you consented to, we ask for your consent again rather than assuming the earlier one still covers it.
This version is effective from 7 September 2026.
14Complaints and the supervisory authority
If you believe we are handling your data wrongly, tell us first: yuxipower@gmail.com. Most of it turns out to be a misunderstanding and is settled the same week.
You also have the right to lodge a complaint with a supervisory authority. YUXI s. r. o. is established in Slovakia, so the competent authority is the Slovak one, whichever language you are reading this page in:
- Úrad na ochranu osobných údajov Slovenskej republiky
- Galvaniho Business Centrum II, Galvaniho 7/B, 821 04 Bratislava, Slovakia
- E-mail: statny.dozor@pdp.gov.sk
- Phone: +421 2 32 31 32 14
- Web: dataprotection.gov.sk
You may also take the matter to a court. A complaint to the authority does not remove that right, and neither route costs you the other.